Go to file
Zhen Ni fd8a23ecbc Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
commit d3366a04770eea807f2826cbdb96934dd8c9bf79 upstream.

Struct ff_effect_compat is embedded twice inside
uinput_ff_upload_compat, contains internal padding. In particular, there
is a hole after struct ff_replay to satisfy alignment requirements for
the following union member. Without clearing the structure,
copy_to_user() may leak stack data to userspace.

Initialize ff_up_compat to zero before filling valid fields.

Fixes: 2d56f3a32c ("Input: refactor evdev 32bit compat to be shareable with uinput")
Cc: stable@vger.kernel.org
Signed-off-by: Zhen Ni <zhen.ni@easystack.cn>
Link: https://lore.kernel.org/r/20250928063737.74590-1-zhen.ni@easystack.cn
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-10-15 11:58:09 +02:00
arch LoongArch: Automatically disable kaslr if boot from kexec_file 2025-10-15 11:58:08 +02:00
block block: use int to store blk_stack_limits() return value 2025-10-15 11:57:51 +02:00
certs sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3 2025-04-25 10:45:58 +02:00
crypto KEYS: X.509: Fix Basic Constraints CA flag parsing 2025-10-15 11:58:05 +02:00
Documentation Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram 2025-10-15 11:58:02 +02:00
drivers Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak 2025-10-15 11:58:09 +02:00
fs ext4: fix checks for orphan inodes 2025-10-15 11:58:08 +02:00
include bpf: Enforce expected_attach_type for tailcall compatibility 2025-10-15 11:57:54 +02:00
init init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD 2025-10-15 11:57:48 +02:00
io_uring io_uring: include dying ring in task_work "should cancel" state 2025-09-25 11:00:09 +02:00
ipc ipc: fix to protect IPCS lookups using RCU 2025-06-27 11:08:49 +01:00
kernel bpf: Reject negative offsets for ALU ops 2025-10-15 11:58:07 +02:00
lib minmax: don't use max() in situations that want a C constant expression 2025-10-02 13:42:55 +02:00
LICENSES
mm mm: hugetlb: avoid soft lockup when mprotect to large memory area 2025-10-15 11:58:09 +02:00
net net: nfc: nci: Add parameter validation for packet data 2025-10-15 11:58:08 +02:00
rust rust: module: place cleanup_module() in .exit.text section 2025-07-06 11:00:06 +02:00
samples ftrace/samples: Fix function size computation 2025-09-19 16:32:02 +02:00
scripts gcc-plugins: Remove TODO_verify_il for GCC >= 16 2025-10-06 11:16:59 +02:00
security ima: limit the number of ToMToU integrity violations 2025-09-19 16:32:01 +02:00
sound ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down 2025-10-15 11:58:07 +02:00
tools nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() 2025-10-15 11:58:09 +02:00
usr kbuild: hdrcheck: fix cross build with clang 2025-03-13 12:58:38 +01:00
virt KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock 2024-10-04 16:29:47 +02:00
.clang-format
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore Remove *.orig pattern from .gitignore 2024-10-04 16:29:44 +02:00
.mailmap
.rustfmt.toml
COPYING
CREDITS
Kbuild
Kconfig
MAINTAINERS sign-file,extract-cert: move common SSL helper functions to a header 2025-04-25 10:45:57 +02:00
Makefile Linux 6.6.111 2025-10-12 12:56:23 +02:00
README

Linux kernel

There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first.

In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentation can also be read online at:

https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory, several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the requirements for building and running the kernel, and information about the problems which may result by upgrading your kernel.